Lucene search

K
githubexploit11484DA6-EF6B-5293-99A2-7443E82FF04B
HistoryJun 04, 2024 - 4:07 p.m.

Exploit for Authentication Bypass by Spoofing in Telerik Report Server 2024

2024-06-0416:07:36
215
telerik report server
cve-2024-4358
cve-2024-1800
pre-authenticated rce
authentication bypass
backdoor account
exploit execution
update
mitigations
academic research.

CVSS3

9.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.931

Percentile

99.1%

CVE-2024-4358 / CVE-2024-1800

Telerik Report Server deserializ…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS3

9.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.931

Percentile

99.1%